Click to see:

Many midsized companies won’t consider identity management, because they think it is too difficult to deploy, too expensive to purchase and implement, and too complicated to administer and maintain.

The problem is that it’s precisely when companies grow to midmarket ($150 million to $1 billion) that user accounts seem to multiply like rabbits, and “password management” requires a disproportionate percentage of security budgets and manpower.

Postponing an investment in some form of unified account or identity management often proves to be one of the most common — and costly — mistakes in security today.

User accounts are like mold: Left unattended, their numbers grow unabated. The number of user accounts per employee increases because companies must expand their application mix to remain competitive, comply with regulatory guidelines, improve marketing and merchandising, and collaborate effectively.

This is a common consequence of growth, but in my experience it rarely occurs without adding considerable user account and authentication overhead. The reasons are easy to identify and nearly impossible to avoid: Many applications use disparate or proprietary authentication methods and databases, and finding a single authentication platform that’s supported by every application is nearly impossible.

The results are too frequently the same. Users have multiple accounts and must contend with multiple authentication procedures and interfaces. Employee productivity and willingness to comply with password security policies deteriorate over time as frustration sets in over having to flog through multiple authentication challenges to complete work.

IT struggles to create, maintain, archive and delete accounts at diverse authentication databases in a timely manner; for example, before credentials can be abused by disgruntled employees or exploited by attackers. In most cases, IT spends time helping employees with password issues that could be more productively applied to patch management and other proactive desktop-security measures.

Whitepapers

• Getting in Compliance With Government Data Regulations By Leveraging Online Security Technology
• How to Offer the Strongest SSL Encryption
• Maximizing Site Visitor Trust Using Extended Validation SSL
• Seven Steps to Reducing your Security Risk
• The Latest Advancements in SSL Technology
• Vulnerability Management For Dummies

View more SECURITY whitepapers

Webcasts

• Mobile Data Security
• Best Practices for Deploying WAN Optimization for Disaster Recovery
• Key Considerations for a Successful 802.11n Deployment
• Solutions to the Toughest IT Challenges in Remote Offices
• Lowering the Cost of Email Archives
• High Availability for SQL Server 2005 Using Array-Based Replication and Host-Based Mirroring Technologies

View more SECURITY webcasts

Special Reports

• The Evolution of Network Security
• Taking Virtualization Up a Notch
• The self-managed network

View more SECURITY special reports